Environment
NetIQ Security Solutions for iSeries
System Auditing and Reporting (SAR)
PSAudit
Situation
Resolution
PSAudit/DAR (Data Auditing and Reporting) archiving is a feature that can be used to write journal entries to a database file (archive) so that the journal receivers can be saved and deleted. The database file can be subsequently used as input to the DAR Report of File Changes (DDRPT).
You can configure archiving for PSAudit/DAR as follows:
1) PSMENU, 1, 3
2) Select a file with option 7=Work with Archive.
3) Specify Archive Status = Y and specify the Archive File and Archive Library, press Enter.
4) On the Work With Files screen, press F11=System Menu.
5) Select option 5 Archive File Generation (DDARC) to update the file archives.
6) Specify the desired parameter values for Starting and Ending journal receivers.
The DAR Archives can be purged using PSMENU, 1, 3, F11, 6 (Archive File Purge (DDPURGE)).
To schedule a job to archive all files configured in DAR:
ADDJOBSCDE JOB(DDARC) CMD(DDARC INFILE(*ALL) RCVRNG(*CURCHAIN)
BATCH(*NO)) FRQ(*WEEKLY) SCDDATE(*NONE) SCDDAY(*ALL)
SCDTIME(230000) JOBD(PSCOMMON/PSJOBD) JOBQ(*JOBD)
MSGQ(*USRPRF) TEXT('Archive DDJRN receiver data to DAR Archives')
You need to run DDARC first and then the report of file changes for archived data to be available. Many clients run this once a day and then run reports.